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. A method for performing electronic transactions , /in which a 
sender of transaction mesaagee is assigned a smairj/card with an 
associated unique identity and a private key stored in the card 
in a protected maimer, and in which an associa/ted public key is 
kept generally available, characterised in that in 
connection with an electronic transaction vmder the sender's 
own control, preferably through his own iiiput of message infor- 
mation^ the sender creates a transaction message, which con- 
tains information necessary for the t/ansaction, and, in his 
smart card, provides the created transaction message with his 
digital signature while using his jown private key for subse- 
quent output and transmission of /the transaction message, 

2. A method as claimed in claifn 1, characterised 
in that the transaction message contains information on 
sender r receiver, amount aijd preferably a transaction serial 
number , 

3 . A method as claimed in claim icharcacterised 
in that the transaction message is created off-line, i.e. not 
connected to the comTminications network that is used for the 
subsequent transmission of the transaction message, 

4. A method as claimed in claim 3, characterised 
in that the transaction message is created off-line. 



5 , A method 
in that the 




claimed in claim 1, characterised 
ansaction message is created in the smart card. 



6. A methojd as claimed in claim 5, characterised 
in that t*ie transaction message is created with the aid of 
sof twarje inserted in the smart card in advance and preferably 
also ©fender information inserted in the card in advance. 

method as claimed in claim 5, character- 
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i s e d in that information required for the transaction mes- 
sage is input with the aid of [input means arranged on the 
smart card, the card preferabljy being a so-called advanced 
smart card* | 

5 

8. A method as claimed in claim 1, characterised 
in that information necesearyj for the transaction message is 
input with the aid of a protected card terminal. 

10 9. A method as claimed in claim 1, characterised 
in that information necessary for the transaction message is 
input with the aid of a separate card communication unit, the 
latter preferably also being! a card activator. 

15 10 . A method as claimed in claim 1, characterised 
in that information necessairy for the transaction message is 
input with the aid of a telecommunications unit controlled by 
the smart card, especially la mobile telecommunications unit 
such as a mobile phone. / 

11. A method as claimed irJ claim 1, characterised in 
that Che transaction message contains sender information in the 
form of at least one of the following pieces of information; a 
card number, a cash card humber, a charge card number, a credit 

25 card number, an account number, an invoice number and an ID 
number . / 

12. A method as claimed /in claim 1, characterised 
in that the transaction /message contains receiver information 

30 in the form of at least lone of the following pieces of informa- 
tion: a card number, a bash card number, a charge card number, 
a credit card number, an account number, an invoice number and 
an ID number . / 

35 13 . A method as claimdd in claim 1, characterised 

in that the signed transaction message is sent to a card or ac- 
count administrator regarding the sender or receiver, that the 
digital signature of /the transaction message is authenticated 
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by using the public key, which is assigned to the o66 who is 
identified as sender by the transmitted transact!^ message, 
and that in case of authenticity, the receiver credited with 
the transaction amount by a clearing process,^ 

14. A method as claimed in claim 13 , c h a/4: a c - 
terisedin that the signed transaction message is 
first sent to the receiver, who optionally after his own 
checking of the digital signature of t/e message forwards the 
signed transaction message to said c^d or account administra- 
tor. 

15. A method as claimed in claim/l, characterised 
in that the signed transaction /iheesage is encrypted by using a 
public key belonging to the a^ressee. to whom the transaction 
message is sent, that the en^ypted; signed transaction message 
is sent to the addressee, t^at the addressee by using his pri- 
vate key decrypts the signffed transaction message, that the 
digital signature of the^ransaction message is authenticated 
by using the public keyXhich is assigned to the one who is 
identified as sender b/ the transmitted transaction message, 
and chat the receive:^ in case of authenticity, is credited 
with the transactiory amount by a clearing process. 

16. A method as claimed in claim 15, charac- 
ter i s e d inA:hat the addressee is Che receiver, that the 
receiver, af ter ydecryption, sends the signed transaction mes- 
sage to a cardAr account administrator, whereupon said auchen- 
tication take^ place. 



30 



35 



17. A method as claimed in claim 1, characterised 
in that th^ signed transaction message is encrypted by using 
the sendee's public key and ia provided with sender information 
and is ttWen sent to a card or account administrator, who has 
the eei^Jer's private Jcey and who preferably has issued the 
user ' /ystnart card, that said adminiecracor decrypts the re- 
ceiv;6{* encrypted message by using said private key, that 
auOh^tication of the digital signature of the decrypted trans - 

message takes place by using the public key, which is 
aasi/igned to the one who ie identified ae sender by the trans - 



Sti/bn 
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mitted transaction message, and that the receiver, i/n case of 
authenticity, is credited with the transaction amonnt by a 

/ 

18. A method as claimed in claim 1. chara9'terieed 
in that the signed transaction message is sent non- encrypted, 
especially via a public communications network, such as the 
Internet or a telecommunications network. 

10 19. A method as claimed in claim 1, characterised, 
in that the signed transaction message Is sent by e-mail . 



V 



20 



30 



35 



20. A method as claimed in any one oy claims 1-18, 
characterised in that tue signed transaction mes- 
sage is sent via a mobile telephon/ network, especially by us- 
ing a so-called SMS service. 

21. A smart card for carrying out electronic transactions, com- 
prising means for storing cara identification information, me- 
ans for protected storing of /a private key, means for storing 
an asymmetrical algorithm, t^eans for input of transaction in- 
formation into the card, processor means for creating in the 
card a transaction message based on input transaction informa- 
tion, such as information on amount and receiver, and optional- 
ly information stored Tn the card, such as information on sen- 
der and preferably a s/erial number, and for providing the 
transaction message yJith a digital signature on the basis of 
said private key aiya said asymmetrical algorithm, and means for 
output of the signed transaction message. 

22. A card as c]/aimed in claim 21. characterised in 
that the card /s of a so-called advanced type. 

23. A combinition of a smart card and a user-controlled commu- 
nication un/t, which is arranged for communication with the 
smart card/and with which the card is adapted to be combined 
with a view to producing an electronic transaction message, 
the card/comprising means for protected storing of a private 
key, means for storing an asymmetrical algorithm and processor 
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meajis for providing a created transaction message/with a digi- 
tal signature baeed on aaid private key and aaip algorithm^ 
and said communication unit comprising means for input of 
transaction information, and meana being arranged in the com- 
munication unit and/or in the card for crating said transac- 
tion message. 




\ 




30 



24. A combination as claimed in clain/23, c h a r a c - 
terisedin that the communica/ion unit is a mobile tele- 
communication device . 

25. A combination as claimed in claim 23, charac- 
terised in that the cojlfrnunicacion unit is a combined 
card activator and informatn-on inputter/processor . 

26. Use of a smart card/with a private key stored therein for 
providing, independently of the communications network, an 
electronic transaction message provided with a digital signa- 
ture based on the p/ivate key. 

27. A method as claimed in claim 2, characterised 
in that the trapisaction message is created off-line, i*e. not 
connected to the communications network that is issued for the 
subsequent t/ansmisaion of the transaction message. 

28. A met>lod as claimed in claim 6, characterised 
in that /information required for the transaction message is in- 
put wi/th the aid of input means arranged on the smart card, the 
card/pref erably being a so-called advanced smart card. 

f3, A method as claimed in claim 27, characterised 
''in that the transaction message is created off-line. 



